Release v/0.4.0 · rustls/rustls-platform-verifier

Improved support for "extra" roots - the ability to specify additional root certificates beyond the platform's own roots has been extended to all supported platforms with the exception of Android (TBD). This can be used for additive configuration, for example to support all system roots and additionally some internal, or company specific, roots. The existing Linux/UNIX verifier's new_with_extra_roots() fn now accepts impl IntoIterator<Item = pki_types::TrustAnchor<'static>> in place of Vec<pki_types::CertificateDer<'static>> to better harmonize with the other platforms.
Replace winapi with windows-sys - the latter is a 1st party Microsoft crate with better on-going support.
Improved documentation - the README has been updated to better describe the differences between this crate and other available options.
Added new BuilderVerifierExt and ConfigVerifierExt traits which provide with_platform_verifier() methods for easier rustls client configuration. These intend to replace tls_config and tls_config_with_provider, which are now deprecated.

What's Changed

ci: disable dependabot cargo updates by @cpu in #120
Port Windows verifier from winapi to windows-sys by @complexspaces in #131
Fix and defend wasm code using wasi platform by @ctz in #136
Add new with extra roots on macos/ios by @stormshield-gt and @complexspaces in #133
Fix FreeBSD by @djc in #137
tests: update vendored real world certs by @cpu in #140
Add new with extra roots on windows by @stormshield-gt in #135
ci: add cargo-semver-checks-action by @cpu in #143
Add deployment considerations section to README by @complexspaces in #142
Bump Java CI testing version from 11 to 17 by @complexspaces in #147
relax new_with_extra_roots API by @stormshield-gt in #145
Run tests on iOS using Mac Catalyst and expand Apple platforms by @complexspaces in #149
Use extension trait to simplify config by @djc in #150
Prepare 0.4.0 by @complexspaces in #148

Full Changelog: v/0.3.4...v/0.4.0